← KEV catalog
CISA known exploited vulnerability

CVE-2024-21410

Microsoft Exchange Server Privilege Escalation Vulnerability

SOURCE FACT

Microsoft · Exchange Server

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA notes

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://nvd.nist.gov/vuln/detail/CVE-2024-21410

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?